Extracting prog: 10m57.378693798s Minimizing prog: 2h21m30.711161128s Simplifying prog options: 0s Extracting C: 39.607848933s Simplifying C: 10m35.442816577s extracting reproducer from 24 programs testing a last program of every proc single: executing 4 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto-mmap$auto-prctl$auto_PR_SET_VMA-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY detailed listing: executing program 0: unshare$auto(0x6c000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x7fff, 0x2) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000300)={0x68, 0x3b, 0x9, 0x1e4, 0x5, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfae, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-unshare$auto-openat$auto_msr_fops_msr-readv$auto-modify_ldt$auto-openat$auto_hsr_node_table_fops_-openat$auto_snd_timer_f_ops_timer detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) modify_ldt$auto(0x1, 0x0, 0x26a4acc7) (async, rerun: 32) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000300), 0x101c82, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_tty_fops_tty_io-openat$auto_v4l2_fops_v4l2_dev-ioctl$auto-openat$auto_v4l2_fops_v4l2_dev-write$auto-syz_genetlink_get_family_id$auto_ovs_packet-socket$nl_generic-sendmsg$auto_OVS_PACKET_CMD_EXECUTE-close_range$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-sendmsg$auto_NL80211_CMD_GET_REG-socket-socket$nl_generic-syz_genetlink_get_family_id$auto_ovs_packet-sendmsg$auto_OVS_PACKET_CMD_EXECUTE-prctl$auto_PR_SET_MM_START_CODE-sendmsg$auto_NETDEV_CMD_QUEUE_GET-sendmsg$auto_NL80211_CMD_GET_REG-mmap$auto-sysfs$auto-fsopen$auto-ioctl$auto_SNDCTL_DSP_SPEED-io_uring_setup$auto-readv$auto-close_range$auto detailed listing: executing program 0: openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c00038008000c000400070012000100898771f1c19f17790485908286dd0000"], 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r6, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "016a76f37bf001ca2200000100"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r7 = prctl$auto_PR_SET_MM_START_CODE(0x732, 0x1, 0x0, 0x3, 0x54) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRESOCT=r4], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(r4, 0xa, 0xfffffffe) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-process_vm_readv$auto-madvise$auto-openat$auto_o2hb_debug_fops_heartbeat-mmap$auto-close_range$auto-mmap$auto-io_uring_setup$auto-setxattrat$auto-sendmsg$auto_NETDEV_CMD_DEV_GET-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-mmap$auto-unshare$auto-socket-io_uring_setup$auto-setsockopt$auto-socketpair$auto-mmap$auto-capset$auto-syslog$auto-ioctl$auto-io_uring_register$auto-mbind$auto-write$auto-writev$auto-openat$auto_aoe_fops_aoechr-fadvise64$auto_POSIX_FADV_NORMAL-madvise$auto detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0, 0xa7) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/reg-dummy/power/runtime_status\x00', 0x500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/213, 0xd5) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x1) r1 = socket(0x2b, 0x1, 0x1) r2 = io_uring_setup$auto(0x40000002c55, 0x0) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) syslog$auto(0x4, 0xfffffffffffffffc, 0x3) ioctl$auto(r1, 0x89a0, 0x4) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) write$auto(0xffffffffffffffff, 0x0, 0x98c7) writev$auto(0xffffffffffffffff, 0x0, 0xb) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000180)='/dev/etherd/revalidate\x00', 0x2000, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x3, 0xa2c5, 0x0) madvise$auto(0x0, 0x2003f2, 0x215) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 26, 27, 29, 29, 29, 25, 30, 27, 27, 24, 30, 2, 29, 30, 30, 29, 30, 30, 21, 25, 28, 30, 5] detailed listing: executing program 0: r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x8, 0x0, 0x4000006) readv$auto(0x3, 0x0, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) write$auto(0x3, 0x0, 0x5c8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) statmount$auto(0x0, 0x0, 0x1fe, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r0, 0x10000000084, 0x8, 0x0, 0x1) getpgid(0xffffffffffffffff) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) executing program 2: close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x404c840) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101c40, 0x0) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto_force_devcoredump_fops_hci_vhci(r0, 0x0, 0x0) read$auto_ocfs2_control_fops_stack_user(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x890d, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket(0xa, 0x1, 0x84) pwrite64$auto(0xc8, 0x0, 0xedef, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000000)={[0x1ff, 0x105, 0x8, 0x29, 0x948b, 0x80009, 0x0, 0x2, 0x67910a5e, 0x1, 0x80000023, 0xfff, 0xb, 0x7, 0x2, 0xd8]}, 0x0) executing program 0: r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020027bd7000fddbdf2525000000050019009a000000060004000000000005002300080000003566ca2e7ce8e02b4f3aac6302c7fa3e483c90375aeb3d70008f14bae39cb08ee304e1ac864f6b96459a56356ead3f8f5d1b9f71288edad8ffe347074d3c703c0de2438c331b417fcdd06fb38aaac50b2505b4816590884e9cc67c2ce29515ca2b79c6b803bf98c6a1101619adeff3ae9226caa0e561e9d33b0d345f8e32c4f625926c97ca1c4075ac17714a09dbfbd8313ca91658e5bccad54b17d4803824f501943b540792e0363f7c2f08f2ee76834f08eea9d7a36a0c08c7e6216fbe48c0713d37478aa304fe0531be7c061c7f6e163e5041be29927f80ad0a764b"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) r2 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='#-$@(,\'H.]&]-[$\x00', &(0x7f0000000080), 0x7fff) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) write$auto(0x3, 0x0, 0x400000000000050) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, 0x0) mmap$auto(0xea88, 0x810004, 0xd, 0x10, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x29, 0x2, 0x0) socket(0xa, 0x1, 0x84) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000005, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r6 = waitid$auto_P_PIDFD(0x3, r5, &(0x7f0000000000)={@_si_pad}, 0x6, &(0x7f0000000080)={{0xda, 0x1}, {0x69, 0x4b}, 0x4, 0x4ae, 0x200, 0x2, 0x8001, 0x80000000, 0x7, 0x7fffffff, 0x2, 0x3, 0x4, 0x2, 0x7, 0x7}) capset$auto(&(0x7f0000000140)={0x2, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0xfff, 0xf}) rt_tgsigqueueinfo$auto_SIGCONT(r6, r7, 0x12, &(0x7f00000001c0)={@_si_pad}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) executing program 2: r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x8, 0x0, 0x4000006) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) connect$auto(0x3, 0x0, 0x52) write$auto(0x3, 0x0, 0x5c8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) statmount$auto(0x0, 0x0, 0x1fe, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r0, 0x10000000084, 0x8, 0x0, 0x1) getpgid(0xffffffffffffffff) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) executing program 0: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r0, 0x300000000000) r2 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x400, 0x6, 0xc564, 0x3, 0xd, 0x200, r2, [0x3, 0x1, 0x6], {0x14d0, 0x2, 0x1868, 0x1, 0x6e, 0x6568, 0x6, 0x5, 0x5}, {0x9, 0x10000000, 0x8, 0x100, 0x0, 0xc52, 0x5, 0x4, 0x9}}) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) getsockopt$auto_SO_RCVBUF(r0, 0x9, 0x8, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x9) mmap$auto(0xf5f, 0x2020001, 0x2, 0x4fa, 0xfffffffffffffffa, 0x7ffb) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, r3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) rt_sigpending$auto(0x0, 0x7ffffffff000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) r4 = socket(0x25, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x6c) msgctl$auto_IPC_SET(0x3e54, 0x1, &(0x7f0000000300)={{0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5c, 0x0, 0x3ff}, 0x0, &(0x7f00000002c0)=0x76, 0x1, 0x85d, 0x3, 0x1, 0x8, 0x5, 0x3, 0xb, @inferred=0xffffffffffffffff, @raw=0x3}) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x20003, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x165000, 0x0) close_range$auto(0x2, r4, 0x7) executing program 2: r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x170) execveat$auto(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) mmap$auto(0x0, 0x20000000000007, 0xffffffffffffffff, 0xeb5, r0, 0x8002) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x121000, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xfffffe39) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) inotify_init1$auto(0x3000000000000) unshare$auto(0x40000080) ioperm$auto(0x5, 0x1, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) rseq$auto(0x0, 0x8000, 0x0, 0x8000006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebe, 0xffffffffffffffff, 0x7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110b27f27200fbdbdf250c00000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) adjtimex$auto(0x0) ioctl$auto(0x3, 0x4020aed2, r2) executing program 0: openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c00038008000c000400070012000100898771f1c19f17790485908286dd0000"], 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r6, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "016a76f37bf001ca2200000100"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r7 = prctl$auto_PR_SET_MM_START_CODE(0x732, 0x1, 0x0, 0x3, 0x54) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRESOCT=r4], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(r4, 0xa, 0xfffffffe) executing program 2: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x2, 0x2a7610b, 0x5, 0x80000011, 0x7, 0x28003) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(0xffffffffffffffff, &(0x7f0000000540)='\x00', 0xbe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/pp_hold\x00', 0x204041, 0x0) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptywd\x00', 0x7a101, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyd8\x00', 0x480, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x80000541b, r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) executing program 3: r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) r2 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='#-$@(,\'H.]&]-[$\x00', &(0x7f0000000080), 0x7fff) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) write$auto(0x3, 0x0, 0x400000000000050) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, 0x0) mmap$auto(0xea88, 0x810004, 0xd, 0x10, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x29, 0x2, 0x0) socket(0xa, 0x1, 0x84) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000005, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r6 = waitid$auto_P_PIDFD(0x3, r5, &(0x7f0000000000)={@_si_pad}, 0x6, &(0x7f0000000080)={{0xda, 0x1}, {0x69, 0x4b}, 0x4, 0x4ae, 0x200, 0x2, 0x8001, 0x80000000, 0x7, 0x7fffffff, 0x2, 0x3, 0x4, 0x2, 0x7, 0x7}) capset$auto(&(0x7f0000000140)={0x2, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0xfff, 0xf}) rt_tgsigqueueinfo$auto_SIGCONT(r6, r7, 0x12, &(0x7f00000001c0)={@_si_pad}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) executing program 1: r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), 0xffffffffffffffff) pread64$auto(r0, 0x0, 0x4, 0xc9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card2/reset\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) r1 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x103103, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/fs/inode-state\x00', 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711}, 0x53) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) ioctl$auto(r1, 0x6f2d, r1) r4 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2, 0x0) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140), 0x8) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r5, 0x0, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r6) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r6) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d40)={0x14, r7, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) writev$auto(r4, &(0x7f0000003600)={0x0, 0x2}, 0x8) executing program 1: add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0), 0xff, 0xfffffffffffffffd) r0 = prctl$auto_PR_SYS_DISPATCH_ON(0x1000, 0x1, 0xffffffffffffffff, 0x4, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) setregid$auto(0xffffffffffffffff, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x6) r2 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/comm\x00', 0x303400, 0x0) sendfile$auto(r0, r2, &(0x7f0000000080)=0x8, 0xd) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x141100, 0x0) read$auto(r3, &(0x7f0000000000)='vdpa\x00', 0x8000) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x121000, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f00000002c0)=""/190, 0xfffffe39) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) inotify_init1$auto(0x3000000000000) unshare$auto(0x40000080) ioperm$auto(0x5, 0x1, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0xff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20c002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event1\x00', 0x0, 0x0) executing program 3: r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto(r0, 0x8048ae66, 0xffffffffffffffff) executing program 3: r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) write$auto(r0, &(0x7f0000000040)='0\x00\\9(\xba\xea\x99\xfc|U\x1c\xc7k', 0x81) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd4/trace/start_lba\x00', 0x22062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x10, 0x2, 0x0) read$auto(0x3, 0x0, 0x80) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r7, @ANYBLOB="01002ebd5100fbcbdf250100000004000180c802018004000680bd020480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4802228004003b0040028b80080026", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400af80cee0bd49dab2a617b70e1a2e040e6ba448f301800a8999cec0bec67eb0617ad3f9a0977d09fa35f0e26b923a2713f1104ff7a5b18a2629bbee5de69b17f06e13870462f79e9deb527b97fd65fc8b156b0f525dfca9340f14dc75ef0881c14f5b87a6c615ee754d72289dcac3c322002b00", @ANYRES32=0x0, @ANYBLOB="6000f68004004880f6c5cccd25852c755b4331229a68ba8457bb2c5bc855fc277901cc018a78610faf86906cfd8f50da20a3cfe74a23710a32b0bd28cfddfe8fbcc03a4f9178ec9a0400de8004004380040078800c00a700feffffffffffffff0000000000000000"], 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, &(0x7f00000003c0)={&(0x7f00000002c0)="a05773e17fc3f097c1dda9674cdda8495227c3f6143b1c9dae28868eb2521113ee53fe55139a6cafe81097998f467936029d7cc2a59bd8df4aac7fbffdb54dfbc4dabe4693db529a457b072d24a74a8cc4064a179611df8dbc3eb7d0d68f653f5c970fe5e8039b309bf88b2d95319ac03fe3fed98f97feb30230ed7bc44c009694c3a27e9526df2fdf2b2d30adf6f4e00f90211708f37043fdc4153b871250e305e2c21184eaa67cb94b2d8e79f89ec13959f9918ffa08e8a519c2ad073327cf5ae99cbd9397b8187ea2e9c37e5535d88c6ce6ca1e247930b3585aa92c14", 0x100}, 0x1, &(0x7f0000000400)="2491e2f933b13df8b9767a34918374d206e5f3c766ee0baae721e41d7b28fc255fc9387e8c68e335e84ca7720ac49cdfdff203042b32ffe2ddf3fee62aa25966f135af5acda0f5ee35af2663f7f69d40ea81d8bce8fc80c0add9", 0x1, 0x1}, 0x401}, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r8 = open(&(0x7f00000001c0)='./file0\x00', 0x161342, 0x13d) write$auto(r8, 0x0, 0x0) executing program 2: mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0x3, 0x4, 0x2e) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2000, 0x0) r1 = timerfd_create$auto(0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.prio.class\x00', 0x183042, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xb, 0x0) r3 = socket(0x2, 0x5, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @private=0xa010101}, 0x631) sendmmsg$auto(r3, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r4, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4080) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x1, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x4007, 0x8000}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Y%y'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x2, 0x0) socket(0x23, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendfile$auto(r2, r2, 0x0, 0x8000) timerfd_gettime$auto(r1, &(0x7f0000000040)={{0x2, 0xd21}, {0x29e2, 0x3ff}}) ioctl$auto_EVIOCGMASK(r0, 0x80104592, 0x0) executing program 1: mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0xf2) ioctl$auto(0x3, 0x89e1, 0x91) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) finit_module$auto(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.10/usb29/29-0:1.0/authorized\x00', 0x2b183, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare$auto(0x3) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) fanotify_init$auto(0x5, 0x2000000000002) fsetxattr$auto(0x1, &(0x7f0000000000)='%\x175\xc0\x8d\xbb\x04\xb3\x97\xd8\xf4\xf6', 0x0, 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20100, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r1, &(0x7f0000000100)={&(0x7f0000000040)="c4f8be0a2bdb4cd12d4d02cbddacb10e7e648068b438c338491cee01b7a18490b2ec52b9f8192608b3023b30163d5c8e7cc78561abaa6daafff08ef21fd3f9ede37c5edc36681e1567520154fdf23e7429f8b61ec0f9cd294781fc585570b0d0a885a6101de5eadfc122b9a1833c8845cb5ec356c0310ef05ae0f49be8b4d84903abdb221059987d1bca77628833bb"}, 0x6, 0x8c, 0x200000000003) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) sendfile$auto(r0, r0, 0x0, 0xffffffff) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x3, 0x40009, 0xdf, 0x9972, 0x7, 0x28000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/pci0000:00/0000:00:00.0/subsystem_device\x00', 0x400, 0x0) preadv$auto(r3, &(0x7f0000001e00)={&(0x7f0000001d40), 0x401}, 0x1, 0x5, 0x4) capset$auto(0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) open(0x0, 0x22240, 0x154) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x42, 0x0, 0x1, 0x0, 0x0, 0x19cc75c20d27ecb8}, 0x24048084) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) executing program 3: keyctl$auto_KEYCTL_INSTANTIATE(0xc, 0x4, 0x6, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket(0x10, 0x2, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:7/wb_stats\x00', 0x2080, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000005ec0), r0) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r4, 0x1, &(0x7f0000000000)="14040000000000001b") r5 = socketcall$auto(0xa, 0x0) sendmmsg$auto(r5, &(0x7f0000000440)={{&(0x7f0000000240)="7ef60afc46fb044bb50fd7111a07b2389d28f74d0283322da843369044022163519ed9f42f1b3725ac7123d9cf1a7c3b5ec96aaa76223a1b415754f17dbe142fc7548bd384e7d368d59ba0424e0e9f61c6f680438019e74465952e20a7befee2c5fb646a0ac9720ff85cc7bcdbb519a16e589c69a737707cd40bce9e21b578a3094e6ee27db3e9106137c05245d4ad293dfbb970d6440e5df3b1d31bbcea73d98b19c366a92ba171fa286cf3a0a1c5", 0x8, &(0x7f0000000340)={&(0x7f0000000300)="c8af12a7eedb7f52e5832530f178472189bf80da9f2758c7ac8f7e6fac39e5f617fef6299ef98281ac56", 0x4}, 0x9, &(0x7f0000000380)="187c241cc99d99f53aebbe8b3fc8d84468c5cdf6c089e06c157174769100000083bd0926651ef11b83a3330b1dcb77672306ac65632503bd777fbc50091c16460fd40ca2a633a6bd9494cf7810c47f828b95a860d0995142810e9111c29a2c5f5a5f288c269545bf3417dcee67fd6c8dc21038e48b89dc1c2d8fcebcc8d31a8663ece9", 0xe9a, 0x8}, 0x101}, 0x800, 0x200) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0090000", @ANYRES16=r6, @ANYBLOB="131f2cbd700023723a", @ANYRES32=r8], 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) shmctl$auto(0x7f, 0x8, &(0x7f0000000500)={{0x2, 0xee01, 0xee00, 0x7, 0x3, 0xb, 0xb17}, 0x2, 0x1000000, 0xf, 0x4, @raw=0x6, @inferred, 0x0, 0x0, &(0x7f0000000180)="3085295dd934a95d57caf3e975fb7d5276f16f5b801b5f2d280b4775906b3f36c9a0c6f14ce2aa0c91", &(0x7f0000000480)="849c9cde68ac6d2db2cb9df4c305dc7565b5b094e025306d6117c4137c314f512e63a4822c55b2e1af5582d24f2034f4019b7953f8c600df4a6bf182a77ee4fb35d1a1f7af41e805c0a201632f4c6fd1232ce2ca2210ffd6fb36a4f4309aa79019318b84f1750551d2526f0edee48fe5de2cd9"}) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000580)={0x56c, r6, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x29, 0xc5, "9d5762f3812d9430a096faae6264fe45c53e5ce256525511896607a85e045aaca0c51c71fd"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xe8, 0x84, 0x0, 0x1, [@nested={0xd9, 0x34, 0x0, 0x1, [@nested={0x4, 0xbb}, @generic="41de9441c457c184a5e9cb9c6fa676af926e834354ff4353db67e6f838b9b22c7320fe80d20c8553b409016a966d945fa15964f6c9f1bef478473d0764dff5232b9ba3643aabaf7717443b10e2dd5482151673ae2dfa1b0fd640bf9e7f75653457fbe8e66c48b11f89a604e7e9b8018648b482b0b49fba1f16ad6534d6ded648dafc2ef5dace83c363bd2f146d86615dbd6945bb97e163d7c47098e7d9f00bfb99d791a8903f1bfe957a5db0457992fac3b54b4787208514b3aebd5afb492c6c01477e64a8f9304d11", @typed={0x8, 0x11e, 0x0, 0x0, @uid=r9}]}, @typed={0x8, 0x127, 0x0, 0x0, @fd=r2}]}, @NL80211_ATTR_IE_RIC={0x432, 0xb2, "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"}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x56c}, 0x1, 0x0, 0x0, 0x4840}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000d33fa0e2a2dfb16f", @ANYRES16=r4, @ANYBLOB="010009000000fddbdf250300000004000a800e0003006f76735f76706f7274000000", @ANYRES32=r0, @ANYRES64=0x0, @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x6040) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty46\x00', 0x800100, 0x0) mmap$auto(0x5, 0x8, 0x9, 0x14, r5, 0x1012) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0, 0xa7) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/reg-dummy/power/runtime_status\x00', 0x500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/213, 0xd5) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x1) r1 = socket(0x2b, 0x1, 0x1) r2 = io_uring_setup$auto(0x40000002c55, 0x0) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) syslog$auto(0x4, 0xfffffffffffffffc, 0x3) ioctl$auto(r1, 0x89a0, 0x4) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) write$auto(0xffffffffffffffff, 0x0, 0x98c7) writev$auto(0xffffffffffffffff, 0x0, 0xb) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000180)='/dev/etherd/revalidate\x00', 0x2000, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x3, 0xa2c5, 0x0) madvise$auto(0x0, 0x2003f2, 0x215) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) sendmmsg$auto(r0, &(0x7f00000000c0)={{0x0, 0x6, &(0x7f0000000080)={0x0, 0xffffffff80000000}, 0x5, 0x0, 0x3, 0x9}, 0x7}, 0xffffffff, 0x6) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram5\x00', 0xa0380, 0x0) fadvise64$auto(r2, 0x7a, 0x6, 0x918) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.9/usb28/28-0:1.0/usb28-port7/power/control\x00', 0x1e700, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x89b0, &(0x7f0000000040)={'dvmrp1\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x4001, 0x2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) timerfd_create$auto(0x8, 0x0) timerfd_settime$auto(r4, 0x3, 0x0, 0x0) (fail_nth: 3) timerfd_settime$auto(r3, 0x1, 0x0, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xa4181, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) executing program 3: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x121000, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f00000002c0)=""/190, 0xfffffe39) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) inotify_init1$auto(0x3000000000000) unshare$auto(0x40000080) ioperm$auto(0x5, 0x1, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) rseq$auto(0x0, 0x8000, 0x0, 0x8000006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebe, 0xffffffffffffffff, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) mmap$auto(0x700, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) adjtimex$auto(0x0) ioctl$auto(0x3, 0x4020aed2, r1) executing program 2: openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c00038008000c000400070012000100898771f1c19f17790485908286dd0000"], 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r6, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "016a76f37bf001ca2200000100"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r7 = prctl$auto_PR_SET_MM_START_CODE(0x732, 0x1, 0x0, 0x3, 0x54) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRESOCT=r4], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(r4, 0xa, 0xfffffffe) executing program 1: r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), 0xffffffffffffffff) pread64$auto(r0, 0x0, 0x4, 0xc9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card2/reset\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) write$auto(r1, &(0x7f0000000440)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\x03\x00\x00\x00\x00\x00\x00\x00*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d\xbcs!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xc4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xf7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85C /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\x9bA\xac\x9c\x8e\r(\x1d\x98\x84\x98\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x103103, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/fs/inode-state\x00', 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x1) connect$auto(r4, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711}, 0x53) read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) ioctl$auto(r2, 0x6f2d, r2) r5 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2, 0x0) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140), 0x8) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000003040), 0x4}, 0x9) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r6, 0x0, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r7) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r7) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d40)={0x14, r8, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) writev$auto(r5, &(0x7f0000003600)={0x0, 0x2}, 0x8) executing program 1: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) modify_ldt$auto(0x1, 0x0, 0x26a4acc7) (async, rerun: 32) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000300), 0x101c82, 0x0) executing program 3: unshare$auto(0x6c000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x7fff, 0x2) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000300)={0x68, 0x3b, 0x9, 0x1e4, 0x5, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfae, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2}) program did not crash replaying the whole log did not cause a kernel crash single: executing 4 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto-mmap$auto-prctl$auto_PR_SET_VMA-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY detailed listing: executing program 0: unshare$auto(0x6c000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x7fff, 0x2) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000300)={0x68, 0x3b, 0x9, 0x1e4, 0x5, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfae, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-unshare$auto-openat$auto_msr_fops_msr-readv$auto-modify_ldt$auto-openat$auto_hsr_node_table_fops_-openat$auto_snd_timer_f_ops_timer detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) modify_ldt$auto(0x1, 0x0, 0x26a4acc7) (async, rerun: 32) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000300), 0x101c82, 0x0) program crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-unshare$auto-openat$auto_msr_fops_msr-readv$auto-modify_ldt$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) modify_ldt$auto(0x1, 0x0, 0x26a4acc7) (async, rerun: 32) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: general protection fault in debug_check_no_obj_freed testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-unshare$auto-openat$auto_msr_fops_msr-readv$auto-modify_ldt$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) modify_ldt$auto(0x1, 0x0, 0x26a4acc7) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-unshare$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-unshare$auto-openat$auto_msr_fops_msr-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-unshare$auto-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-ioctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140), &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = socket(0x29, 0x0, 0x3ff) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r3, 0x891d, 0x24) (async) r5 = socket(0x29, 0x2, 0x0) ioctl$auto(r5, 0x89f2, r3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-socket-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) socket(0x29, 0x2, 0x0) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-ioctl$auto-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) ioctl$auto(0xffffffffffffffff, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-recvmmsg$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: kernel BUG in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r5 = socket(0x29, 0x2, 0x0) ioctl$auto(r5, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r5 = socket(0x29, 0x2, 0x0) ioctl$auto(r5, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0x891d, 0x24) (async) r5 = socket(0x29, 0x2, 0x0) ioctl$auto(r5, 0x89f2, 0xffffffffffffffff) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socket(0x29, 0x0, 0x3ff) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r2, 0x891d, 0x24) (async) r4 = socket(0x29, 0x2, 0x0) ioctl$auto(r4, 0x89f2, r2) prctl$auto(0x203d, 0x5, 0x0, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r5 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r5, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = socket(0x29, 0x0, 0x3ff) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r3, 0x891d, 0x24) (async) r5 = socket(0x29, 0x2, 0x0) ioctl$auto(r5, 0x89f2, r3) prctl$auto(0x203d, 0x5, r2, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) write$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = socket(0x29, 0x0, 0x3ff) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r3, 0x891d, 0x24) (async) r5 = socket(0x29, 0x2, 0x0) ioctl$auto(r5, 0x89f2, r3) prctl$auto(0x203d, 0x5, r2, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = socket(0x29, 0x0, 0x3ff) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r3, 0x891d, 0x24) (async) r5 = socket(0x29, 0x2, 0x0) ioctl$auto(r5, 0x89f2, r3) prctl$auto(0x203d, 0x5, r2, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, 0xffffffffffffffff, 0x8000) (async) pread64$auto(0xffffffffffffffff, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r0 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r0}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = socket(0x29, 0x0, 0x3ff) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r3, 0x891d, 0x24) (async) r5 = socket(0x29, 0x2, 0x0) ioctl$auto(r5, 0x89f2, r3) prctl$auto(0x203d, 0x5, r2, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) pread64$auto(r0, 0x0, 0xd00, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: kernel BUG in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r1 = fcntl$auto(0x3, 0x4, 0xa553) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) (async) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: kernel BUG in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, 0x0, 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socket(0x29, 0x0, 0x3ff) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r2, 0x891d, 0x24) (async) r4 = socket(0x29, 0x2, 0x0) ioctl$auto(r4, 0x89f2, r2) prctl$auto(0x203d, 0x5, 0x0, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r5 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r5, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, 0x0, &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), 0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = socket(0x29, 0x0, 0x3ff) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r3, 0x891d, 0x24) (async) r5 = socket(0x29, 0x2, 0x0) ioctl$auto(r5, 0x89f2, r3) prctl$auto(0x203d, 0x5, 0x0, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, 0x0, {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, 0x0, 0x0, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, 0x0, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, 0x0, 0x0, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380), 0x0, {r1}}, 0x58) (async, rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (rerun: 32) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: general protection fault in debug_check_no_obj_freed testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: kernel BUG in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, 0x0, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: kernel BUG in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: kernel BUG in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, 0x0, 0x400) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async, rerun: 32) program crashed: kernel BUG in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async, rerun: 32) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (rerun: 32) program crashed: kernel BUG in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ program crashed: kernel BUG in qlist_free_all simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ program crashed: kernel panic: corrupted stack end in worker_thread a never seen crash title: kernel panic: corrupted stack end in worker_thread, ignore testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ program did not crash testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ program crashed: kernel BUG in qlist_free_all testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ program crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ program did not crash testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ program did not crash testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ program crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (rerun: 32) program crashed: kernel BUG in qlist_free_all validation run: crashed=true testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (rerun: 32) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (rerun: 32) program crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all validation run: crashed=true testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-pread64$auto-socketpair$auto-fcntl$auto-sendmmsg$auto-socket-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-syz_clone3-mmap$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-ioctl$auto-socket-ioctl$auto-prctl$auto-recvmmsg$auto-mmap$auto-ioctl$auto-openat$auto_msr_fops_msr-readv$auto-openat$auto_hsr_node_table_fops_ detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0xeb1, r0, 0x8000) (async) pread64$auto(r0, 0x0, 0xd00, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0x1a, 0x800, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) (async, rerun: 32) syz_clone3(&(0x7f00000013c0)={0x200, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x29, 0x0, 0x3ff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r4, 0x891d, 0x24) (async) r6 = socket(0x29, 0x2, 0x0) ioctl$auto(r6, 0x89f2, r4) prctl$auto(0x203d, 0x5, r3, 0x0, 0x80) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0405626, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (rerun: 32) program crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all validation run: crashed=true reproducing took 2h50m22.232179117s repro crashed as (corrupted=false): BUG: kernel NULL pointer dereference, address: 0000000000000008 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 800000007c8b6067 P4D 800000007c8b6067 PUD 0 Oops: Oops: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 7032 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:qlink_to_cache mm/kasan/quarantine.c:131 [inline] RIP: 0010:qlist_free_all+0x8d/0xf0 mm/kasan/quarantine.c:176 Code: 48 89 c2 48 c1 e2 06 48 03 15 1f 8a a7 0b 48 8b 42 08 48 89 c1 83 e1 01 48 83 e9 01 48 09 c8 48 21 d0 80 78 33 f5 49 0f 45 c5 <48> 8b 68 08 eb 88 48 83 7d 40 00 75 9b 66 f7 45 08 04 02 75 93 8b RSP: 0018:ffffc9000654f428 EFLAGS: 00010206 RAX: 0000000000000000 RBX: ffff88802c2a8000 RCX: ffffffffffffffff RDX: ffffea0000b0aa00 RSI: ffffffff8df1f2e9 RDI: ffff88802c2a8000 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c2a8000 R13: 0000000000000000 R14: ffffc9000654f458 R15: 0000000000000100 FS: 00007fa39d6a46c0(0000) GS:ffff888124374000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000008 CR3: 00000000757fe000 CR4: 00000000003526f0 Call Trace: kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4569 [inline] slab_alloc_node mm/slub.c:4898 [inline] kmem_cache_alloc_noprof+0x241/0x6e0 mm/slub.c:4905 vm_area_alloc+0x1f/0x160 mm/vma_init.c:32 __mmap_new_vma mm/vma.c:2547 [inline] __mmap_region+0x104d/0x2da0 mm/vma.c:2771 mmap_region+0x35d/0x620 mm/vma.c:2857 do_mmap+0xc63/0x12f0 mm/mmap.c:560 vm_mmap_pgoff+0x29e/0x470 mm/util.c:581 ksys_mmap_pgoff+0xe4/0x610 mm/mmap.c:606 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa39c79ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa39d6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007fa39ca15fa0 RCX: 00007fa39c79ce59 RDX: 00000000000000db RSI: 0000000004020009 RDI: 0000000000000000 RBP: 00007fa39c832d6f R08: 0000000000000401 R09: 0000000000008000 R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa39ca16038 R14: 00007fa39ca15fa0 R15: 00007fffb789fb58 Modules linked in: CR2: 0000000000000008 ---[ end trace 0000000000000000 ]--- RIP: 0010:qlink_to_cache mm/kasan/quarantine.c:131 [inline] RIP: 0010:qlist_free_all+0x8d/0xf0 mm/kasan/quarantine.c:176 Code: 48 89 c2 48 c1 e2 06 48 03 15 1f 8a a7 0b 48 8b 42 08 48 89 c1 83 e1 01 48 83 e9 01 48 09 c8 48 21 d0 80 78 33 f5 49 0f 45 c5 <48> 8b 68 08 eb 88 48 83 7d 40 00 75 9b 66 f7 45 08 04 02 75 93 8b RSP: 0018:ffffc9000654f428 EFLAGS: 00010206 RAX: 0000000000000000 RBX: ffff88802c2a8000 RCX: ffffffffffffffff RDX: ffffea0000b0aa00 RSI: ffffffff8df1f2e9 RDI: ffff88802c2a8000 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c2a8000 R13: 0000000000000000 R14: ffffc9000654f458 R15: 0000000000000100 FS: 00007fa39d6a46c0(0000) GS:ffff888124374000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000008 CR3: 00000000757fe000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: 48 89 c2 mov %rax,%rdx 3: 48 c1 e2 06 shl $0x6,%rdx 7: 48 03 15 1f 8a a7 0b add 0xba78a1f(%rip),%rdx # 0xba78a2d e: 48 8b 42 08 mov 0x8(%rdx),%rax 12: 48 89 c1 mov %rax,%rcx 15: 83 e1 01 and $0x1,%ecx 18: 48 83 e9 01 sub $0x1,%rcx 1c: 48 09 c8 or %rcx,%rax 1f: 48 21 d0 and %rdx,%rax 22: 80 78 33 f5 cmpb $0xf5,0x33(%rax) 26: 49 0f 45 c5 cmovne %r13,%rax * 2a: 48 8b 68 08 mov 0x8(%rax),%rbp <-- trapping instruction 2e: eb 88 jmp 0xffffffb8 30: 48 83 7d 40 00 cmpq $0x0,0x40(%rbp) 35: 75 9b jne 0xffffffd2 37: 66 f7 45 08 04 02 testw $0x204,0x8(%rbp) 3d: 75 93 jne 0xffffffd2 3f: 8b .byte 0x8b final repro crashed as (corrupted=false): BUG: kernel NULL pointer dereference, address: 0000000000000008 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 800000007c8b6067 P4D 800000007c8b6067 PUD 0 Oops: Oops: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 7032 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:qlink_to_cache mm/kasan/quarantine.c:131 [inline] RIP: 0010:qlist_free_all+0x8d/0xf0 mm/kasan/quarantine.c:176 Code: 48 89 c2 48 c1 e2 06 48 03 15 1f 8a a7 0b 48 8b 42 08 48 89 c1 83 e1 01 48 83 e9 01 48 09 c8 48 21 d0 80 78 33 f5 49 0f 45 c5 <48> 8b 68 08 eb 88 48 83 7d 40 00 75 9b 66 f7 45 08 04 02 75 93 8b RSP: 0018:ffffc9000654f428 EFLAGS: 00010206 RAX: 0000000000000000 RBX: ffff88802c2a8000 RCX: ffffffffffffffff RDX: ffffea0000b0aa00 RSI: ffffffff8df1f2e9 RDI: ffff88802c2a8000 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c2a8000 R13: 0000000000000000 R14: ffffc9000654f458 R15: 0000000000000100 FS: 00007fa39d6a46c0(0000) GS:ffff888124374000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000008 CR3: 00000000757fe000 CR4: 00000000003526f0 Call Trace: kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4569 [inline] slab_alloc_node mm/slub.c:4898 [inline] kmem_cache_alloc_noprof+0x241/0x6e0 mm/slub.c:4905 vm_area_alloc+0x1f/0x160 mm/vma_init.c:32 __mmap_new_vma mm/vma.c:2547 [inline] __mmap_region+0x104d/0x2da0 mm/vma.c:2771 mmap_region+0x35d/0x620 mm/vma.c:2857 do_mmap+0xc63/0x12f0 mm/mmap.c:560 vm_mmap_pgoff+0x29e/0x470 mm/util.c:581 ksys_mmap_pgoff+0xe4/0x610 mm/mmap.c:606 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa39c79ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa39d6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007fa39ca15fa0 RCX: 00007fa39c79ce59 RDX: 00000000000000db RSI: 0000000004020009 RDI: 0000000000000000 RBP: 00007fa39c832d6f R08: 0000000000000401 R09: 0000000000008000 R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa39ca16038 R14: 00007fa39ca15fa0 R15: 00007fffb789fb58 Modules linked in: CR2: 0000000000000008 ---[ end trace 0000000000000000 ]--- RIP: 0010:qlink_to_cache mm/kasan/quarantine.c:131 [inline] RIP: 0010:qlist_free_all+0x8d/0xf0 mm/kasan/quarantine.c:176 Code: 48 89 c2 48 c1 e2 06 48 03 15 1f 8a a7 0b 48 8b 42 08 48 89 c1 83 e1 01 48 83 e9 01 48 09 c8 48 21 d0 80 78 33 f5 49 0f 45 c5 <48> 8b 68 08 eb 88 48 83 7d 40 00 75 9b 66 f7 45 08 04 02 75 93 8b RSP: 0018:ffffc9000654f428 EFLAGS: 00010206 RAX: 0000000000000000 RBX: ffff88802c2a8000 RCX: ffffffffffffffff RDX: ffffea0000b0aa00 RSI: ffffffff8df1f2e9 RDI: ffff88802c2a8000 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c2a8000 R13: 0000000000000000 R14: ffffc9000654f458 R15: 0000000000000100 FS: 00007fa39d6a46c0(0000) GS:ffff888124374000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000008 CR3: 00000000757fe000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: 48 89 c2 mov %rax,%rdx 3: 48 c1 e2 06 shl $0x6,%rdx 7: 48 03 15 1f 8a a7 0b add 0xba78a1f(%rip),%rdx # 0xba78a2d e: 48 8b 42 08 mov 0x8(%rdx),%rax 12: 48 89 c1 mov %rax,%rcx 15: 83 e1 01 and $0x1,%ecx 18: 48 83 e9 01 sub $0x1,%rcx 1c: 48 09 c8 or %rcx,%rax 1f: 48 21 d0 and %rdx,%rax 22: 80 78 33 f5 cmpb $0xf5,0x33(%rax) 26: 49 0f 45 c5 cmovne %r13,%rax * 2a: 48 8b 68 08 mov 0x8(%rax),%rbp <-- trapping instruction 2e: eb 88 jmp 0xffffffb8 30: 48 83 7d 40 00 cmpq $0x0,0x40(%rbp) 35: 75 9b jne 0xffffffd2 37: 66 f7 45 08 04 02 testw $0x204,0x8(%rbp) 3d: 75 93 jne 0xffffffd2 3f: 8b .byte 0x8b